Author: Amir Ban
Date: 15:15:09 12/02/99
Go up one level in this thread
On December 02, 1999 at 17:48:11, Fernando Villegas wrote: >On December 02, 1999 at 17:20:32, Amir Ban wrote: > >> >>The email Eugenio Castillo talks about in the thread "Virus" came from me. I did >>not actually send him an email, rather the virus did. This is the "Explore.zip >>worm" virus. It's bad and devious ! Once you are infected, it will scan your >>email folders and address books and it will GENERATE FABRICATED EMAILS WITH >>ATTACHMENT TO ANYONE YOU'VE EVER KNOWN. >> >>The email it sends is a formula which appears to be a genuine message. Here's >>what Eugenio received: >> >>----- Mensaje original ----- >>De: Amir Ban <amirban@m-sys.com> >>Para: <EUGEN7@teleline.es> >>Enviado: jueves, 02 de diciembre de 1999 12:00 >>Asunto: RE: Paderborn >> >> >>> Hi EUGENIO ! >>> I received your email and I shall send you a reply ASAP. >>> Till then, take a look at the attached zipped docs. >>> bye. >>> >>> >>> >> >>The subject "Re: Paderborn", the name "Eugenio", and the text are all >>automatically generated by the virus, based on the fact that Eugenio once sent >>me a message titled "Paderborn" ! The virus has a curious "bug", sometimes it >>will "sign" the message, but with the name of someone else (who is real). E.g. >>someone else got this message from me, but it was signed "Ruth". >> >>To realize how devious this virus is, realize that I got a clear warning about >>it earlier, with a description of the message to look out for, but when I got it >>I thought it was a genuine message (I got it from my VP of Marketing) ! >> >>I was infected for 50 minutes today at noontime. Though I realized within >>minutes that I got the virus, closed Microsoft Outlook and rebooted, the virus >>can send emails through the Microsoft Exchange even if Outlook is closed ! If >>you are infected, make sure you are not connected to the outside world until you >>have run the antidote. During the 50 minutes I was infected, it sent about 50 >>such messages. All of them have already been warned. >> >>So you don't need to worry about emails from me, but this thing is going around >>like wildfire and you should be worried about getting it from everyone else in >>the world. Watch out ! Oh, by the way, besides spreading itself, it also >>destroys your C files and MS office files. It opens them for update and closes >>them, leaving the file with zero length. I heard this evening that one of >>Israel's biggest telecom companies (ECI) is paralyzed because of this virus. >> >>If you need the antidote, write me and I'll send it to you. I already sent it to >>Eugenio three hours ago. >> >>Amir > >Amir: >Maybe you could send the antidote to the C.C.C Chess Resources of this site so >every one here can get it without you sending it once and again... >Fernando I'll email it to Steve. Since anti-virus companies have to make a living too, I don't want it posted on the web till I find if there are any copyright issues involved. Currently I don't know where this antidote comes from. It doesn't have a copyright notice. I found several web pages about this virus including this one: http://www.fbi.gov/nipc/zipworm.htm. This is several months old, but it's making a comeback now. Amir
This page took 0 seconds to execute
Last modified: Thu, 15 Apr 21 08:11:13 -0700
Current Computer Chess Club Forums at Talkchess. This site by Sean Mintz.